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(57) Abstract: A method for updating a software of a sub-sea controller 
(3 1 ) located under the sea level. The sub-sea controller manages a plural- 
ity of tools in a sub-sea well. An application module (35) is downloaded 
into the sub-sea controller. The application module is executed using a 
virtual machine (36) implemented within the sub-sea controller. 
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MEIHOD AND APPARATUS FORDYNAMIC APPLICATTON 
MANAGEMENT IN SUB-SEA WELL INSTALLATIONS 

Bacl^roimd of Inventioii 

Field of the Invention 

[0001] The invention gena:ally relates to a sob-sea controller in a sub-sea well 
installation. 

Background Art 

[0002] A downhole installation for extracting oil or gas usually comprises a 
plurality of tools. The plurality of tools may for exanQ>le con5)rise a sensor used 
for measuring a parameter such as temperature, pressure or flow rate, , an actuator, 
e.g., a pump or a valve. A controller located at a surface of the downhole 
installation communicates with Hxe tools. In case the downhole installation is 
located under the sea level, it is understood that the surface is in feet a border 
between the water and an earth fomiation- In this latter case, the sub-sea controller 
maybe installed at a relatively deep location of the sea and may thus be difiliccdt to 
access. 

[0003] FIG. 1 provides an illustration of a sulD-sea well installation. A surfece 
controller or a computer 14 located above the sea level communicates with a sub- 
sea controll^ 11 located under the sea level, tising a dedicated channel, e,g., a 
single cable 12. The sub-sea controller 11 is protected from water and pressure by 
a canister 13, The sub-sea controller 11 also communicates witih a plurality of 
tools. As an exanople, the plurality of tools comprises a pressure sensor 15a, a 
pump 15b and a theraiometer 15c. The pump 15b may be located within a casing 
of the sub-sea well 19. The pressure sensor 15a and the thermometer 15c may be 
located at a neighborhood of a formation 18. 
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[0004] In a sub-sea eavirQnmait, it may happen that coxxmuimcation between the 
computer 14 and flie sub-sea controller 11 is temporally intemiptecL For exanoqple, 
a communicating device like a modem (not represented) may be shut off by a 
circuit breaker (not represented) and cause the sub-sea controller 11 to be isolated 
jfrom the computer 14. The sub-sea controller 11 may however continue to 
communicate with the plurality of tools. Hence, a native application is 
implemented directly within the sub-sea controller 11. 

[0005] The native application con^rises a plurality of tasks. The sub-sea controller 
11 executes Ihe tasks. For example the sub-sea controller 11 requests and receives 
values of the measured pressure and temperature jfrom the pressure sensor 15a and 
the thermometer 15c, The sub-sea controller 11 also outputs orders to the pump 
15b. 

[0006] Furthermore, the sub-sea controller 11 may execute a conditional order. A 
conditional order is executed only if a condition is fulfilled. For example, if a 
measured pressure is below a predefined threshold, the pump 15b may be 
activated to provide a better attraction of oil or gas. The sub-sea controller 11 
sends a request to the pressure sensor 15b to obtain the value of the pressure and 
conq)ares tiie value of the pressure to tiie predetermined threshold. If the value of 
the pressure is smaller than the predetermined threshold, the sub-sea controller 11 
sends a command to the -pump 15a instmcting the pvaoap 15a to activate itself. 

[0007] The sub-sea controller 11 may also execute a task for a purpose of statistics. 
An exanq)le of task for a purpose of statistics may be to count how many times the 
temperature parameter reaches a second predefined threshold during a period of 
time, hi this case, the sub-sea controller 11 regularly receives the value of the 
measured temperature from the thermometer ISc during the period of time and 
compares the value of the measured temperature to a second threshold. If the value 

2 



wo 2005/041031 



PCT/EP2004/010658 



of the measured temperature reaches the second predefined threshold, a local 
variable may be incremented. 

[0008] The sub-sea controller 11 executes the plurality of tasks to manage the 
plurality of tools. The sub-sea controller 11 stores the values of the parameters 
received from the plurality of tools or any other data, e.g., the local variable, into a 
storage device (not represented) such as a hard disk, or into an internal memory 
(not represented), e.g., a RAM memory, or an EEPROM memory. 

[0009] The computer 14 only reads the intemal memory. If the computer and the 
sub-sea controller 11 are temporally unable to communicate, the sub-sea controller 
11 continues to execute the native application and stores the data into the intemal 
memory. When the communication between the comgputer 14 and the sub-sea 
controller 11 is reestablished, the intemal memory may be read by the conqmter 
14, 

[0010] The sub-sea controller 11 is installed under the sea level and manages the 
tools for a relatively extended life-time, typically several years. There may be a 
need for adding a new tool to the well, and as a consequence, the manflg itig 
software of the sub-sea controller 11 may need to be updated to take into account 
the new tool. There may also be a need for modifying the managing software 
during the life-time for any reason. For exanaple, the predetermined threshold may 
need to be changed, a conditional loop may be added, or a driver managing an 
additional tool may be needed. According to prior art such an update is performed 
by replacing the managing software. This may be done by erasing the flash 
memory of the sub-sea controller 11, and downloading a new application to be 
stored ia the flash naemory and run from the flash memory. 

[0011] FIG. 2 contains an illustration of an updating operation according to prior 
art The sub-sea controller 21 usually comprises a plurality of devices (not 
represented) such as a Central Processing Unit, flie flash memory, a timer, a 



3 



wo 2005/041031 



PCT/EP2004/010658 



plurality of Iziput/Oa^ut ports etc. fonniBg a hardware layer 22. Aa operating 
system layer 23 links the hardware layer 22 to flie applications. A native 
^plication 24 is run above the operating system layer 23. To i^date a software of 
the sub-sea controller 21, a new application 25 is downloaded and replaces the 
native application 24. During the downloading, the sub-sea controller 21 is unable 
to execute any application and the tools are not managed. 

Summary of Inventioii 

[0012] In a first aspect the invention provides a method for updating a software of 
a sub-sea controller located under the sea level. The sub-sea controller manages a 
plurality of tools in a sub-sea well. An appKcation module is downloaded into the 
sub-sea controller. The application module is executed using a virtual machine 
hnplemented wilhin the sub-sea controller. 

[00131 la a JSrst preferred embodiment^ a native application of the sub-sea 
controller is executed within the sub-sea controller and a native interfece is 
executed within the sub-sea controller. The method further conq>rises accessing 
the native interface from the native application to exchange data with the 
application module. 

[0014] In a second preferred embodiment, a native application of the sub-sea 
controller is executed within the sub-sea controller and a native interface is 
executed within the sub-sea controller. The method further con^xcises accessing 
the native interface from the application module to exchange data witii the native 
application. 

[0015] In a third preferred embodiment, the downloading and the executing of the 
application module are perfomied without interrupting an executing of the native 
application of the sub-sea controller. 

4 
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[0016] In a foiirth preferred embodiment, the iq)p]ication module is executed in a 
defmed memory, and tbe native application is executed in a native memory. The 
defined memory is distinct from the native memory. 

[0017] In a fifth preferred embodiment, the application modiile contains a driver 
for a tool. 

[0018] In a second aspect the invention provides a sub-^sea controller located under 
the sea level for managiug a plurality of tools in a sub-sea well installation. The 
sub-sea controller comprises downloading means to download an application 
module to the sub-sea controller, A virtual machine executes the downloaded 
application module. 

[0019] In a sixtii preferred embodiment, the sub-sea controller further conq)rises a 
native application implemented wi^ the sub-sea controller and a native 
interface implemented within the sub-sea controller. Hie native interface enables 
the application module to access the native application. 

[0020] In a seventh preferred embodimeat the native interface enables the native 
application to access the application module. 

[0021] In an ei^th preferred embodiment, the sub-sea controller further comprises 
a native memory wherein the native application is executed and a defined 
memory wherein the application module is executed. The defined memory is 
distinct fi^om the native memory, 

[0022] hi a ninth preferred embodiment, the sub-sea controller further conqirises a 
protection register and accessing means to access the protection register firom tiie 
application module. The protection regist^ authorizes an access to the native 
application only if a key code is written hereinto. 

[0023] In a third aspect the invention provides a sub-sea well installation 
comprismg a sub-sea controUer. The sub-sea controller comprises downloading 
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means to download an application modulo to the sub-sea controller. A virtual 
machine executes the downloaded application module. 

[0024] Oiher aspects and advantages of the invention will be apparent from the 
following description and the appended claims. 

Brief Description of Drawings 

[0025] FIG, 1 contains an illustration of a sub-sea well installation- 

[0026] FIG. 2 contains an illustration of an updating operation according to prior 
art 

[0027] FIG 3 shows a block diagram of a sub-sea controller according to the 
present invention- 

[0028] FIG. 4 shows a block diagram illustrating an example embodiment of liie 
invention. 

Detailed Description 

[0029] In a well that is not located under an isolating layea: such as the sea, a 
controller that manages the tools may be located at ground surface, i.e. close to the 
computer. The communication between the controller and the computer may 
typically be performed with an Ethernet connection having a relatively large 
bandwidth, e.g., a bandwidfli of 100 Mbps. The bandwidth has a significant effect 
on a duration of a download from the computer to the controller. As an example, 
for an application that has a size of about 1 MB, a download time may be 
approximately one tenth of second During this download time, the controller is 
stopped and management of the tools may be interrupted. Since certain values of 
the parameters may generally be read by the controller every second, i.e., in a time 
period that is relatively large as compared to the download time, the replacement 
of the application in the controller by a new application generates minor 
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incanveiriences only, ia njost cases the replacement of the application lias no 
significant effect on the reading of paiameters. 

[00301 Itt a sub-sea well installation, the communication between the computer and 
the sub-sea controller may be substantially slower: a standard bandwidth may be 
9600 bauds. It may take a number of minutes, e.g., 15 minutes to download a 1 
MB application fix>m flie computer to Ihe sub-sea controller. Since the sub-sea 
controller is stopped during &e downloading, a variable nuinber of values of each 
parameter may not be recorded while the controller downloads fee jqjplication. 
Furthennore, &e tools, e.g., the actuators may not be controlled during the 
downloading. Iti order to avoid a situation in which the actuators remain 
uncontrolled, the sub-sea well installation may need to be stopped before every 
updating of the ^phcation in tiie controller. 

[00311 The invention enables to update a sofiware of flie sub-sea controller without 
any loss of data, and avoids stopping of the sub-sea well installatioiL 

[0032] FIG 3 contains a block diagram of a sub-sea controller 31 according to the 
present invention. The sub-sea controller 31 comprises a hardware layer 32 and an 
operating system layer 33. A native appUcation 34 is executed to manage tiie tools 
during the life-time of the sub-sea controUer 31. Ifader normal operating 
circumstances, the native appHcation 34 may not need to be replaced during the 
life-time. Thestefore, the native ^pUcation 34 may be stored in a pennanent 
memory such as a Read Only Memoiy (not shown in FIG. 3). However, it is 
possible in another embodiment that the native appHcation be stored in a flash 
memory or any other type of memory. If tiiere is a need during tiie life-time of tiie 
sub-sea controller 31 for adding a new tool or a new fimctionahty, a software of 
the sub-sea controller 31 is updated. The updating is performed according to the 
invention by downloading an appUcation module 35„ from a programming device, 
e.g. the computer, to the sub-sea controller 31. The ^Hcation module 35. 



7 



wo 2005/041031 



PCT/EP2004/010658 



contains an interpretable code and may be interpreted by the virtual machine 36, 
using a library 37. Application modules 35j, ... that may have been downloaded at 
an earlier updating may possibly be executed by the virtual machine 36, during the 
downloading of the application module 35n, and continue to be executed after tiie 
download and execution of the application module 35n. The library 37 enables the 
virtual machine 36 to interpret the application module 35n; it contains a set of 
descriptions of functions and variables to be used by the executed application 
module 35„; hence the application module 35n does not need to include tiie 
desoriptions of flie functions and the variables that are used. The plication 
module 35. may therefore have a reduced size. 

I0033J While tiie applications modules 35i, ... 35„ are executed by the virtual 
machine 36, the native application 34 remains in memory and continues to be run 
during the update. The parameters from the tools may continue to be continuously 
read and stored into Uie internal memory of the sub-sea controller 31 and the tools 
remain controlled during the tq>date. 

[0034] Furthermore, the application module 35„ contains only flie new additional 
application and may tiius be substantially smaller in size than the native 
application: typically, the application module 35„ may be 10 or 20 kilobytes long. 
Using a 9600 bauds connection to the computer, tiie application module 35n takes 
approximately 10 or 20 seconds to download to the sub-sea controller 31. Hie 
available bandwidth between the computra- and tiie sub-sea controller 31 may be 
less soDicitated by tiie downloading than in prior art and bence more bandwidth is 
made available for other purposes. 

[0035] Following the update of the software of tiie sub-sea controller 31, both flie 
native application 34 and the application modules 35i,. . 35„ are executed. 

[0036] FIG. 4 contains a blodc diagram of an example embodiment of tiie 
invention. An ^plication module 45 corresponding to a new additional 
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application is developed in a development enviromnent 41. In a preferred 
embodiment, a source code 43, written in a standard programming language is 
compiled by a coiiq>iler 44 that generates the application module 45^. The 
development environment 41 may be a Personal Con5>uter or a Workstation for 
exan^le. The generated application module 45„ contains an inteipretable code. 

[0037] The application module 45^ is then downloaded into the sub-sea controller 
412. The sub-sea controller 412 comprises a hardware layer 410, an operating 
system layer 44 and a native application 47. The downloaded applications modules 
45i, 45n are executed in a run-time environment 42 conrprising a virtual 
machine 46 and a library 411, The virtual machine 46 interprets the application 
module 45^ ujsing the Hbraiy 411. 

[0038] In one exaxnple embodiment, the sub-sea well ixxstallation contains two 
thermometers. A fbrst and a second thermometers measure a ten^erature value 
respectively at a first zone and a second zone of a borehole. A first task is included 
in a code of the native application 47. The first task compares the value of a jHrst 
temperature measured at the first thermometer to a first threshold value. The first 
task increments a first local variable if the value of the first temperature is greater 
than the first tiureshold value. 

[0039] During the life-time of the sub-sea well, there may be a need for statistics 
over the values of tiie temperature measured at a second tixemoometer. A second 
task may have to be implemented. The second task may be very similar to the first 
task, e.g., the value of a second temperature measured at the second thermometer 
may be compared to a second threshold value. The second task increments a 
second local variable if the value of the second temperature is greater than the 
second threshold value. According to the invention, the apphcadon module 45n 
corresponding only to the second task is developed in the developnaent 
environment 41. The application module 45n is downloaded into the sub-sea 
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controller 412 and interpreted by the virtual machine 46. The sub-sea controller 
412 also continues executing Hie first task. Hence statistics over the values of 
temperature measured at both thermometers are performed 

100401 In the updating of the software of the sub-sea controller 412 according to 
prior art, a developer is required generally to produce a new native application by 
modifying the existing native application. For example, the developer has to 
include a code corresponding to a new additional task to the native ^Ucation. 
This requires a relatively good knowledge of the native application 47. 
Furthermore, the developer has to ©itiiiely debug tiie modified native a^jpKcation. 
In an updating operation according to the present invention, only the application 
module 45n corresponding to the new task needs to be developed. This is 
substantially easier and less time consuming tiian modi^g the entire native 
application. 

10041 J In a preferred embodiment of tiie present invention, the native plication 
47 may be executed within a native memory (not represented), and the appKcation 
modules 45i, . . .45a may be run wifliin a defined memory (not represented) distinct 
&om the native memory in order to protect the native apphcation 47 fi:om a code 
etior. In the method from prior art, the native application 47 needs to be modified 
in order to include any new software. If the modified native ^pUcation includes 
code errors, such as an infinite loop, the controller may not be able to work. The 
invention enables to develop only the apphcation module 45„ corresponding to fbs 
new task. The appEcatiou modules 45i, ...45„ and the native ^Hcation 47 axe 
executed within two separate memories. Hence a risk of encountering emns 
related to executing a modified native ^Hcation 47 is elnninated. If flie 
^Hcation module 45„ conesponding to tiie new task includes an infinite loop, Ihe 
native a|)plication remains unaffected. 
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[0042] Furthermore, the downloading may be secured in fliis embodiment so as to 
avoid a non-autidorized person replacing or modi^g an application module, 

[0043] In the preferred embodiment, the application modules 45i, ...45n and the 
native application 47 are executed within two distinct memories. However, ttie 
application modules 45i) ...45|| may be allowed to access the native application 
47* The second task of the example described above conqirises incrementing tiie 
second local variable every time the value of the ten^erature measured at the 
second thermometer is beyond the second threshold value. The corresponding 
^plication module 45n needs to access the temparature data measured at the 
second thermometer. In this exan:q5le, the second thermometer may be managed in 
the native application 47: there is thus a need for accessing the native application 
47 to run the second task. A native interface 48 enables the application modules 
45i, . . .4S|, to access the native application 47. The native application 47 may also 
be allowed to access the application modules 45,, , ..45„. 

[0044] In another exanople embodiment, the native application contains variable 
data that are stored into a flash memory, and a program. The application modules 
may be allowed to write in a protection register. The protection register provides a 
lock allowing or forbidding access to the flash memory depending on a content of 
the protection register. If the application module accesses the protection register 
and writes a key code into the protection register, the access to the flash memory 
may be allowed. The application module may in this latter case directly modify the 
variable data of the native application or even the program of tiie native 
s^pUcation if it is also stored in the flash memory. 

[0045] In a further exan^le embodiment, the plurality of tools comprises a 
pressure sensor, a first pump and a second pump. The first and second pumgps are 
located respectively in a first and second zone of the oil- or gas-formation. The 
sub-sea controller executes a native task corresponding to the native application. 
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The sub-sea controller requests and receives values of fkie measured pressure from 
the pressure sensor. The values of the measured pressure are con^ared to a 
predetermined pressure threshold value. If the value of flie micasured pressure is 
smalls than the predetenxiined pressure toeshold value, the first and second 
pumps are insttucted to activate themselves. A native application may contain 
variable data that are stored into a flash memory, and a program. The variable data 
con5)rise a pump register. The pump register indicates which pump may be 
activated if the value of the measured pressure is smaller than the predetemuned 
pressure threshold value. In this exan:q)le, the pun^ register has a value such tibiat 
only the first and second pun^s may be instructed to activate themselves. During 
the life-time of the sub-sea controller, a quantity of fluid, e-g,, oil or gas, within 
the second zone of the earfli formation may decrease. Hence there may be a need 
for modifying the native task: only the first pump should be activated when 
measured pressure is smaller than the predetermined pressure threshold value. 
According to the present invention, an application module is downloaded. The 
application module is interpreted by the virtual machine* The application module 
accesses the protection register and writes the key code into flie protection register. 
The access to the flash memory containing ihe variable data of the native 
application is thus allowed. The pump register is modified by erasing and 
programming at least one block of the flash memory. The pump register in the 
flash memory may no longer indicate that instructions may he applied to the 
second pump. The controller continues instructing the first puix5>'to activate itself 
if the measured pressure is smaller tiian the predetermined pressure threshold 
value. 

[0046] The new task corresponding to the application no^dule in Ms exaxi5)le 
embodiment is to write the key code into the protection register, to erase and 
reprogram at least one block of the flash memory. The new task may also instruct 
the second j>\xmp to remain closed. The application module may thus be 
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substantially small in size. It may take a relatively short duration to download such 
application module. 

[0047] However, since the native application is modified, the suh-sea controller 
may be stopped during the relatively short duration: a relatively small number of 
values of pressure may not be recorded In the updating of a software of the sub* 
sea controller according to prior art, a new application is downloaded. The number 
of values of pressure that may not be recorded may be substantially higher than in 
the updating of fhe example embodiment 

I0048J While the invention has been described with respect to a limited number of 
embodiments, those skilled in the art, having benefit of this disclosure, will 
appreciate that other embodiments can be devised which do not depart from fhe 
scope of fhe invention as disclosed herein. Accordingly, the scope of the invention 
diould be limited only by fhe attached claims. 
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Claims 

[cl] A sub-sea controller (31) located under Hie sea level for managing a plurality of 
tools in a sub-sea well installation^ the sub-sea controller (31) coiiq)rising: 
downloading means to download an application module (35^) to the sub-sea 

controller (31); and 
a virtual machine (36) to execute the downloaded application module C35n). 

Ic2] The sub-sea controller (412) according to claim 1, furflier coiqprising: 

a native application (47) implemented within the sub-sea controller (412); and 
a native interface (48) implemented within the sub-sea controller (412), the native 

interface (48) enabling the application module (45n) to access the native 

application (47). 

[c31 The sub-sea controller (412) according to claim 2, wherein 

the native interface (48) enables the native application (47) to access the 
application module (45n). 

[c4] The sub-sea controller (412) according to any one of claims 2 or 3, further 
comprising: 

a native memory wherein the native application (47) is executed; and 
a defined memory wherein the application module (45n) is executed* the defined 
memory being distinct jfrom the native memory. 

[c5I The sub-sea controller (412) according to any one of claims 2 to 4 further 
comprising: 

a protection register, the protection register authorizing an access to the native 

application only if a key code is written hereinto; 
accessing means to access the protection register from tiie application module. 
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[c6] The sub-sea controller (45j^ according to any one of claims 1 to 5 wherein fhe 
application module (4S„) contains a driver for a tool 

[c7] A su1>sea well installation conq)rising a sub^sea controller (31) according to any 
<me of claims 1 to 6. 

[c81 A method for updating a software of a sub-sea controller (31) located under the 
sea level, the sub-sea controller (31) managing a plurality of tools in a sub-sea 
well» the method con^rising: 

downloading an application module (35n) into the sub-sea controller (31); and 
executing the application module (35,0 ^ virtual machine (36) implemented 
wilhin the sub-sea controller (31). 

Ic9] The method according to claim 8, further conqsrising: 

executing a native application (47) of the sub-sea controller (42) within the sub- 
sea controller (412); 
executing a native interface within the sub-sea controller (412); 
accessing the native interface from the native application (47) to exchange data 
with the application module (45^)* 

[clO] The method according to claim 8y further comprising: 

executing a native application (47) of the sub-sea controller (42) within die sub- 
sea controller (412); 

executing a native interface within the sub-sea controller (412); 

accessing tibie native interface from the application module (45n) to exchange data 
with the native application (47). 

Icll] The mefliod according to any one of claims 9 or 10, wherein the downloading and 
the executing of the application module (45^ are performed without interrapting 
an executing of the native application of the sub-sea controUer (412). 
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[cl2I The method according to any erne of claicns 9 to 1 1, further con^rising: 
executing the s^Iication module (45n) in a defined memory; 
executing the native application (45n) in a native memory; 
wherein &e deiSned memory is distinct from the native memory. 

Icl31 The method according to anyone of claims 8 to 13 wherein the «5>plication module 
(45n) contains a driver for a tool. 
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